From ec7d74a386c0b2f38990079c3b0d2a2b30be0e71 Mon Sep 17 00:00:00 2001
From: Jay Berkenbilt <ejb@ql.org>
Date: Mon, 28 Aug 2017 22:25:45 -0400
Subject: Add test case for overflow in PNG filter (fixes #150)

---
 qpdf/qtest/qpdf.test          | 1 +
 qpdf/qtest/qpdf/issue-150.out | 2 ++
 qpdf/qtest/qpdf/issue-150.pdf | 4 ++++
 3 files changed, 7 insertions(+)
 create mode 100644 qpdf/qtest/qpdf/issue-150.out
 create mode 100644 qpdf/qtest/qpdf/issue-150.pdf

diff --git a/qpdf/qtest/qpdf.test b/qpdf/qtest/qpdf.test
index 5a28a91b..2fc7f63a 100644
--- a/qpdf/qtest/qpdf.test
+++ b/qpdf/qtest/qpdf.test
@@ -225,6 +225,7 @@ my @bug_tests = (
     ["147", "previously caused memory error", 2],
     ["148", "free memory on bad flate", 2],
     ["149", "xref prev pointer loop", 3],
+    ["150", "integer overflow", 2],
     );
 $n_tests += scalar(@bug_tests);
 foreach my $d (@bug_tests)
diff --git a/qpdf/qtest/qpdf/issue-150.out b/qpdf/qtest/qpdf/issue-150.out
new file mode 100644
index 00000000..862b4d1e
--- /dev/null
+++ b/qpdf/qtest/qpdf/issue-150.out
@@ -0,0 +1,2 @@
+WARNING: issue-150.pdf: can't find PDF header
+overflow/underflow converting 9900000000000000000 to 64-bit integer
diff --git a/qpdf/qtest/qpdf/issue-150.pdf b/qpdf/qtest/qpdf/issue-150.pdf
new file mode 100644
index 00000000..c9ce992d
--- /dev/null
+++ b/qpdf/qtest/qpdf/issue-150.pdf
@@ -0,0 +1,4 @@
+00008 0 obj<</Type/XRef/Filter/Fl/DecodeParms<</Columns 9900000000000000000/Predictor 12>>/W[0 2 0]/Size 0>>stream
+xœc0endobj
+startxref
+4
\ No newline at end of file
-- 
cgit v1.2.3-54-g00ecf